pydantic/pydantic-ai v1.107.3 on GitHub

This release backports two security fixes to the v1 line:

GHSA-h4xc-3qfq-jf93 (high) — the development web chat UI's (Agent.to_web(), clai web) chat endpoint didn't check the request's content type, so a plain cross-origin request from a website open in the developer's browser could reach it without a CORS preflight and trigger the served agent to run and execute its tools with the local process's privileges and credentials. The endpoint now requires Content-Type: application/json.
GHSA-3gh4-cghq-f8v4 (low) — retry-prompt content wasn't redacted by InstrumentationSettings(include_content=False) when the retry wasn't tied to a tool call.

Patched in 1.107.3; both are also patched on the v2 line (2.28.0 and 2.27.1 respectively).

What's Changed

Backport #7357 to v1 by @DouweM in #7381
Only accept JSON request bodies on the web UI chat endpoint (v1 backport) by @DouweM in #7383

Full Changelog: v1.107.2...v1.107.3